Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2AZMAlmZSGwfkX6D9cGYolLWg18.roa
File: 2AZMAlmZSGwfkX6D9cGYolLWg18.roa (raw, json)
Hash identifier: 6J+R/qJJILWFaVv0xVEP0OpOBFcbRVk2WGmscJzd7+c=
Subject key identifier: D8:06:4C:02:59:99:48:6C:1F:91:7E:83:F5:C1:98:A2:52:D6:83:5F
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01907A373BE49609F71D6848089D91B58D24
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2AZMAlmZSGwfkX6D9cGYolLWg18.roa
Signing time: Wed 03 Jul 2024 20:09:18 +0000
ROA not before: Wed 03 Jul 2024 20:09:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.199.213.0/24 maxlen: 24
185.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 16:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7a:37:3b:e4:96:09:f7:1d:68:48:08:9d:91:b5:8d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jul 3 20:09:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8064c025999486c1f917e83f5c198a252d6835f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:7b:13:f4:94:39:d7:83:71:72:32:66:b3:
24:ff:e3:3b:76:d8:b4:b9:e0:01:e0:39:5c:75:1b:
36:ae:cf:b0:e1:33:f0:3c:c8:0a:41:1a:e7:e2:43:
27:09:cb:9b:c5:92:50:b8:97:93:31:34:c1:40:b6:
45:54:88:d9:47:59:f4:f4:a2:99:de:80:a6:f8:d6:
fa:1c:8a:84:60:9d:7b:91:1a:c3:b9:99:32:65:c5:
7d:ab:4f:30:32:6e:3d:8c:63:80:27:ca:58:75:fb:
84:b9:79:3f:e2:20:05:9d:79:40:38:2e:93:90:e0:
20:68:28:37:92:78:03:70:7b:38:df:27:1c:6b:06:
dd:09:e9:33:57:6d:bb:65:c0:e5:83:c6:64:99:a0:
9b:08:fa:c6:15:55:94:45:27:d3:1f:fb:9c:4b:93:
eb:76:f4:0c:43:18:06:4e:af:c7:ea:9d:a1:94:a2:
63:8c:4c:60:fc:e1:57:34:6c:91:4a:ea:7f:51:89:
b1:eb:00:82:a7:5f:00:50:64:4a:64:1b:4c:df:ec:
af:0d:c7:f4:5a:d2:72:ff:16:f0:c5:33:42:db:7e:
57:b3:28:8d:89:45:b5:7f:0d:2c:59:c7:51:19:23:
2e:f1:85:6a:8b:89:28:11:dd:46:2f:b9:d0:fe:f2:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:06:4C:02:59:99:48:6C:1F:91:7E:83:F5:C1:98:A2:52:D6:83:5F
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2AZMAlmZSGwfkX6D9cGYolLWg18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.213.0/24
185.250.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a8:11:69:b1:b7:3a:93:a1:29:bf:3a:af:50:44:96:6f:a2:
5f:81:7c:94:ed:3d:88:10:11:1d:69:29:70:47:c0:1a:9a:f5:
b3:49:6d:f4:45:f5:bd:a0:ef:92:29:bc:74:8a:c3:d5:0c:66:
3f:34:26:55:71:00:75:21:26:77:51:c1:f9:b4:c5:4f:a8:93:
9e:4a:73:97:40:b9:30:13:5e:c8:93:ab:ae:9d:4d:f1:67:6b:
38:f8:6c:32:a5:19:ac:e7:26:86:8b:53:87:77:2f:1c:48:cf:
93:10:38:46:5d:d0:a1:e8:72:b7:02:80:b3:f3:a0:fc:53:b8:
17:6c:4f:0a:37:ac:2f:d0:75:ff:80:71:76:c1:b3:42:f5:99:
c8:93:06:9e:4d:1e:ab:ce:b2:1e:27:4a:11:6d:3e:63:07:f3:
94:aa:5f:c5:b8:f1:a7:0c:1f:5a:ff:c6:0e:31:c6:42:cb:3f:
b8:08:46:7e:46:92:b2:92:e3:f1:19:83:bb:9b:18:4f:b1:ed:
42:c2:18:a2:e6:c4:1f:03:02:09:30:5a:d0:6f:b2:7d:f4:a0:
d6:5d:f5:c6:eb:23:c8:bd:cc:f7:f4:20:21:7a:f1:2a:d2:f6:
36:19:3d:3a:8c:58:0e:e5:11:52:a2:6a:42:78:cc:55:9c:82:
28:9c:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:18:58 2024 by rpki-client on console-fra.rpki-client.org